Making API Requests

All AcuView API requests must be made over HTTPS and use JSON request and response bodies. Requests that require authentication must include the Authorization: Bearer <token> header. When the token expires or is missing, the API returns an unauthorized response, and the client must re-authenticate before retrying the request.

For endpoints that process time-based data, the X-Timezone header is required. This ensures that timestamps and activity windows are interpreted consistently. If the time zone value is invalid, the API returns a validation error.

When an error occurs, AcuView returns a structured error response using a ProblemDetails schema. This schema includes a short error summary, HTTP status code, detailed description, and the request path that caused the error. Clients should use both the HTTP status and error body to determine the appropriate next action, such as correcting input data, re-authenticating, or retrying the request.